Is CVE-2026-75878 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-75878?

CVE-2026-75878 has a CVSS v3 severity of CRITICAL (9.1).

Back

CVE-2026-75878

Description

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header.